bluffs

BLUFFS 简介 本仓库包含与 BLUFFS：蓝牙前向与未来保密性攻击与防御 相关的代码。 论文摘要 蓝牙是一种无处不在的无线通信技术。数十亿台设备在敏感应用中使用它，并交换私有数据。蓝牙的安全性取决于蓝牙标准及其两种安全机制：配对和会话建立。此前没有任何工作（包括标准本身）分析过这些机制的未来和前向保密性保证，例如，当攻击者攻破当前会话时，蓝牙配对和会话建立能否保护过去和未来的会话。为了弥补这一空白，我们提出了六种新颖的攻击，统称为 BLUFFS...

CVE-2019-5420

CVE-2019-5420 针对 Rails CVE-2019-5420 的漏洞利用 问题 在 Rails v5.2.2 之前，在开发模式下保护会话时，应用程序会从应用程序名称派生密钥。...

CVE-2026-6729

HKUDS OpenHarness prior to PR 159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hijack other users' sessions by exploiting a shared ohmo session key that lacks sender identity verification. Attackers can reuse...

CVE-2026-6729: Improper Authentication

HKUDS OpenHarness prior to PR 159 remediation contains a session key derivation vulnerability that allows authenticated participants in shared chats or threads to hijack other users' sessions by exploiting a shared ohmo session key that lacks sender identity verification. Attackers can reuse...

OpenHarness 安全漏洞

OpenHarness is a lightweight development and runtime framework for Data Intelligence Lab@HKU, open-source in nature. There is a security vulnerability in OpenHarness, which stems from a session key derivation issue. This vulnerability could allow authenticated participants to hijack other users’...

Qualcomm Chipsets 授权问题漏洞

Qualcomm Chipsets are a family of chipsets from Qualcomm Incorporated USA. An authorization issue vulnerability exists in Qualcomm Chipsets that stems from information disclosure during session key derivation...